• info
• discussion
• exploit
• solution
• references

Microsoft DirectX MJPEG Video Streaming Stack Based Buffer Overflow Vulnerability

Solution:
Microsoft has released an advisory along with fixes. Please see the references for details.


Microsoft DirectX 9.0 a

• Microsoft Security Update for DirectX 9 for Windows 2000 (KB951698)
  http://www.microsoft.com/downloads/details.aspx?FamilyId=4dc47e04-5e95 -4636-a814-3f912d961461


• Microsoft Security Update for Windows Server 2003 (KB951698)
  http://www.microsoft.com/downloads/details.aspx?FamilyId=2274ecb2-2802 -47e2-84fd-6621fcb17758


• Microsoft Security Update for Windows Server 2003 for Itanium-based Systems (KB951698)
  http://www.microsoft.com/downloads/details.aspx?FamilyId=be71c002-2f64 -49e9-9f4b-ba99c4f3caf6&displaylang=en


• Microsoft Security Update for Windows Server 2003 x64 Edition (KB951698)
  http://www.microsoft.com/downloads/details.aspx?FamilyId=5ba63bb7-ed6d -4c59-88b3-456eda07e190&displaylang=en


• Microsoft Security Update for Windows XP (KB951698)
  http://www.microsoft.com/downloads/details.aspx?FamilyId=7aaa6427-1e22 -4566-960c-836a3b9e5f36


• Microsoft Security Update for Windows XP x64 Edition (KB951698)
  http://www.microsoft.com/downloads/details.aspx?FamilyId=5e8e7e9d-828d -442c-acac-8d91e80dfb36

Microsoft DirectX 9.0b

• Microsoft Security Update for DirectX 9 for Windows 2000 (KB951698)
  http://www.microsoft.com/downloads/details.aspx?FamilyId=4dc47e04-5e95 -4636-a814-3f912d961461


• Microsoft Security Update for Windows Server 2003 (KB951698)
  http://www.microsoft.com/downloads/details.aspx?FamilyId=2274ecb2-2802 -47e2-84fd-6621fcb17758


• Microsoft Security Update for Windows Server 2003 for Itanium-based Systems (KB951698)
  http://www.microsoft.com/downloads/details.aspx?FamilyId=be71c002-2f64 -49e9-9f4b-ba99c4f3caf6&displaylang=en


• Microsoft Security Update for Windows Server 2003 x64 Edition (KB951698)
  http://www.microsoft.com/downloads/details.aspx?FamilyId=5ba63bb7-ed6d -4c59-88b3-456eda07e190&displaylang=en


• Microsoft Security Update for Windows XP (KB951698)
  http://www.microsoft.com/downloads/details.aspx?FamilyId=7aaa6427-1e22 -4566-960c-836a3b9e5f36


• Microsoft Security Update for Windows XP x64 Edition (KB951698)
  http://www.microsoft.com/downloads/details.aspx?FamilyId=5e8e7e9d-828d -442c-acac-8d91e80dfb36

Microsoft DirectX 9.0 c

• Microsoft Security Update for DirectX 9 for Windows 2000 (KB951698)
  http://www.microsoft.com/downloads/details.aspx?FamilyId=4dc47e04-5e95 -4636-a814-3f912d961461


• Microsoft Security Update for Windows Server 2003 (KB951698)
  http://www.microsoft.com/downloads/details.aspx?FamilyId=2274ecb2-2802 -47e2-84fd-6621fcb17758


• Microsoft Security Update for Windows Server 2003 for Itanium-based Systems (KB951698)
  http://www.microsoft.com/downloads/details.aspx?FamilyId=be71c002-2f64 -49e9-9f4b-ba99c4f3caf6&displaylang=en


• Microsoft Security Update for Windows Server 2003 x64 Edition (KB951698)
  http://www.microsoft.com/downloads/details.aspx?FamilyId=5ba63bb7-ed6d -4c59-88b3-456eda07e190&displaylang=en


• Microsoft Security Update for Windows XP (KB951698)
  http://www.microsoft.com/downloads/details.aspx?FamilyId=7aaa6427-1e22 -4566-960c-836a3b9e5f36


• Microsoft Security Update for Windows XP x64 Edition (KB951698)
  http://www.microsoft.com/downloads/details.aspx?FamilyId=5e8e7e9d-828d -442c-acac-8d91e80dfb36

Microsoft DirectX 8.1

• Microsoft Security Update for DirectX 8 for Windows 2000 (KB951698)
  http://www.microsoft.com/downloads/details.aspx?FamilyId=c6a28d45-13cf -48c4-8f89-3417d552e90b

Microsoft DirectX 10.0

• Microsoft Security Update for Windows Server 2008 (KB951698)
  http://www.microsoft.com/downloads/details.aspx?FamilyId=c0c495f8-2a35 -4638-a635-1e55dd15e062&displaylang=en


• Microsoft Security Update for Windows Server 2008 for Itanium-based Systems (KB951698)
  http://www.microsoft.com/downloads/details.aspx?FamilyId=80ec83e0-cfb8 -4a5e-9254-6679a7225b83&displaylang=en


• Microsoft Security Update for Windows Server 2008 x64 Edition (KB951698)
  http://www.microsoft.com/downloads/details.aspx?FamilyId=0b70fc2e-4e80 -4ae8-8682-41ea04c24e4e


• Microsoft Security Update for Windows Vista (KB951698)
  http://www.microsoft.com/downloads/details.aspx?FamilyId=4d4b305b-57f8 -448d-92fa-3dcdd1f42ed7


• Microsoft Security Update for Windows Vista for x64-based Systems (KB951698)
  http://www.microsoft.com/downloads/details.aspx?FamilyId=b040cfad-2290 -44f4-8f5a-5d1ed98a7265&displaylang=en